fake Xero accounting software invoice delivers Dridex banking Trojan — 3 Comments

  1. I received a similar fake email invoice today from somebody representing themselves as Xero.

    Dear Customer

    Here’s your Xero subscription invoice for the previous billing period.

    View your bill: INV-0606237

    You’ve already provided us with your payment details so unless advice to the contrary is received from you by 15 Nov 2017, the amount will be debited from your credit card on or after 22 Nov 2017.

    Need help updating your payment details or understanding how Xero bills you? Click here
    Need help with your online subscription invoice? Click here
    Need a question answered about Xero? Ask it here

    The Xero Billing Team

    I can’t post a screenshot in this reply but viewing the source here is the link that bill# INV-0606237 connects with:


    Word of caution, be wary and never open any links in emails such as these.

Leave a Reply

Your email address will not be published. Required fields are marked *